Collaborate Disseminate
My company allows customers to upload PDFs, JPEGs and PNGs to our servers, which are then viewed by clients. We want to minimise the potential for attack on the clients. While the image formats are generally pretty safe, PDFs introduce mu… Continue reading When receiving PDFs from unknown sources, is it sufficient to remove dynamic content to minimise attack surface?
I have the folowing pdf: https://www.akos-rs.si/fileadmin/user_upload/06141-19-2019-5-obj.pdf
and it seems someone covered some text with some software. I was wondering if it is possible to see what’s under that black paint (as it seems th… Continue reading PDF see under "blacked out" part of text [duplicate]
I have been requested to send a copy of a past year tax return to a US state office. I have been in contact with a tax official by email to send this copy through various means. This state is a few thousand miles away from my current resid… Continue reading Secure PDF Document Transmission for US State Government Official
I have been requested to send a copy of a past year tax return to a US state office. I have been in contact with a tax official by email to send this copy through various means. This state is a few thousand miles away from my current resid… Continue reading Secure PDF Document Transmission for US State Government Official
If you are a Windows 11/10 user and have some PDF file(s) with missing page numbers, then the tools…
For more, visit TheWindowsClub.com. Continue reading How to add Page Numbers to PDF files
Do pdf files pose a higher security risk than regular image files (png, jpeg, etc.)? In my understanding is that most image files don’t carry any security risk because all exploits were fixed, but there are a lot more security risks for PD… Continue reading Do pdf files pose a higher security risk than regular image files (png, jpeg, etc.)?
Our project is to apply digital signature to PDF, so each user should have their own key pairs and a certificate. To keep key securely, we plan to purchase HSM, but from what I understand HSM have a limited number of keys that it can store… Continue reading HSM High Volume Keys
I received and opened a PDF that ran:
GetTickCount
IsDebuggerPresent
SetWindowsHookExW
Sleep
GetAdaptersAddresses
These are the 2 files it wrote:
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphos… Continue reading A PDF ran GetAdaptersAddresses. Should I be concerned?
I’ve received PDF at work, which I then ran through virustotal scan out of habit. It turned out to be clean, but at the same time some tags caught my attention, namely:
checks-user-input
detect-debug-environment
direct-cpu-clock-access
lo… Continue reading Strange virustotal tags on pdf file
For context; I have a web application that allows users to upload a PDF file from which the web app extracts certain information by parsing it. The app then sends this information to another server for further processing.
The web app is ba… Continue reading Vulnerabilities in Receiving User-Submitted PDF Files Through HTTP(S)